Re: Connnection to SSL enabled server

I've done some more testing. I installed pgadmin3-1.0.1 and
pgadmin3-1.1.0-cvs20031030 on a Mandrake 9.2 box. The Mandrake 9.2 box
has all updates applied and is running openssl-0.9.7b-4.1.92mdk. When I
connect from this machine to my SSL enabled PostgreSQL machine pgadmin3
crashes(both versions) when I try to execute a query. I can use either
version to connect to my nonSSL PostgreSQL server and I can execute a
query. So here is a summary of my current results.

Server: PostgreSQL 7.3.4 compiled with option --with-openssl. Openssl
version 0.9.7c.
1. RedHat9 client: Pgadmin3 crashes when executing a query while connected
to the SSL enabled PostgreSQL server. Pgadmin3 executes query against a
nonSSL PostgreSQL server and against the SSL enabled server when ssl =
false is set in postgresql.conf. Client has openssl-0.9.7a installed.
2. Mandrake 9.2 client: Same results as with RedHat9 client. Client has
openssl-0.9.7b-4.1.92mdk installed.
3. Slackware 9.1: All queries on all servers work. Client has
openssl-0.9.7b installed.

Tim

Andreas Pflug <pgadmin(at)pse-consulting(dot)de>
10/30/2003 04:41 AM

To: timothy(dot)r(dot)morley(at)kc(dot)frb(dot)org
cc: pgadmin-support(at)postgresql(dot)org
Subject: Re: [pgadmin-support] Connnection to SSL enabled server

timothy(dot)r(dot)morley(at)kc(dot)frb(dot)org wrote:

>
> I just setup a Slackware 9.1 machine and tried pgadmin3-1.0.1 and the
> October 29 snapshot of pgadmin3 with a connection to my SSL enabled
> PostgreSQL server. Everything worked perfectly. The Slack 9.1
> machine has openssl-0.9.7b on it. I have a coworker running Mandrake
> 9.1 which contains openssl-0.9.7a. His pgadmin3 also crashes trying
> to run queries against our SSL enabled PostgreSQL server. He
> installed the Mandrake rpms for pgadmin3 from the
> pgadmin.postgresql.org site.
>
> You were right about needing to play with the libraries. I'll see if
> I can get my RedHat 9 box up to openssl 0.9.7b.
>

Actually, I can't believe that only 0.9.7b will work, but not 0.9.7a or
0.9.7c, so I'd be glad if you could confirm this.

When mentioning libraries, I was talking about compilation options for
multithread support and possible linkage against mt enabled libraries.
Possibly, there are platforms where things are not compiled/linked
correctly, but nobody noticed because ssl connections are rarely used
(at least for admins contacting a local server)

Regards,
Andreas